Top Internet Scams

  •  
  • Phishing scams

    Phishing is a scam in which the attacker sends an email purporting to be from a valid financial or eCommerce provider. The email often uses fear tactics in an effort to entice the intended victim into visiting a fraudulent website. Once on the website, which generally looks and feels much like the valid eCommerce/banking site, the victim is instructed to login to their account and enter sensitive financial information such as their bank PIN number, their Social Security number, mother's maiden name, etc. This information is then surreptitiously sent to the attacker who then uses it to engage in credit card and bank fraud - or outright identity theft.


  • How to Report a Phishing Scam

    Phishing is a scam in which the attacker sends an email purporting to be from a valid financial or ecommerce provider. The email tries to trick recipients into clicking a link which leads to a spoofed website that only looks like the real bank or ecommerce site. If the recipient enters their login details on the fake website, their credentials will be sent to the attackers. Using this method, attackers are often able to gain not only the login username and password, but quite often the victim also divulges their credit card and other sensitive financial and personal information.


  • Greeting Card Scams

    Be extra suspicious. Suspect a scam if (a) the greeting card doesn't address you by name; (b) the card sender's name isn't included in the body of the email; (c) the name isn't familiar; and (d) it's not a holiday, a birthday, or any other occasion that might warrant a card. If the card requires that you install a special viewer or tries to download a file to your system, treat it like a trojan. Cancel the download and scan your system with up to date antivirus software.


  •  
  • Mary's Antivirus Software Blog

    The latest greeting card scam is once again targeting Hallmark. The bogus email claims "you have recieved a Hallmark E-Card!" The first tip-off for the security conscious should be the misspelled 'recieved' - it's I before E except after C (or when sounded like A as in neighbor and weigh). One would assume the prose experts at Hallmark would know their receive from their recieve - which, of course, they would. In any event, the message doesn't even read like a real Hallmark notice, which always identifies the sender by name and gives you an alternate link URL that you can copy and paste in lieu of blindly clicking a link. Why is this important? Because a real Hallmark URL doesn't point to an IP address followed by 'postcard.exe' - which the malicious link does.


  • Nigerian 419 Advanced Fee Fraud

    Before the popularity of email, Nigerian 419 scams (aka Advanced Fee Fraud) were originally sent over fax machines and by snail mail. Today, email is the preferred method of these scammers and there are more Nigerian 419 Advanced Fee Fraud scams than ever before.


  • Nigerian 419 Adopts Iraqi Battle Front

    No matter what country the scammer pretends to be from, all Nigerian 419 scams share a common thread. They start with drama, add a call to action, end with a call for secrecy, and close with a gesture of goodwill. This particular scam starts off like this:


  • Murder by email

    Nigerian 419 schemes are quite old, dating back to pre-Internet days when the scam was carried out via fax. Basically, someone (usually from Nigeria or South Africa), claims to be the deceased relative of some dignitary who has been left large sums of cash, and needs your help laundering it. What many don't realize is that these 'too good to be true' scams have sometimes ended in kidnapping and murder - so they are hardly benign.


  • What is Pump and Dump?

    Ever received one of those emails that pretends to be TO someone else, passing on some hot stock tip they've learned? Referred to as 'pump and dump' scams, the intent of the email is to get lots of people to take advantage of this unexpected windfall of information and buy the stock. This inflates the price, at which time the scammers sell their shares for a hefty profit. It works like this:


  • PDF Spam Attack

    When I opened my email this evening and got bombarded with several suspicious PDF attachments, that's exactly how it felt - a PDF Spam Attack. My first inclination was to consider there might be a new exploit about. So I went searching for clues and came across Nick Kelly's (McAfee) blog post from earlier today.


  • Killer Spam : Hitman Email Threatens Recipients

    Imagine opening your email inbox and reading a message from an alleged assassin - claiming you're the target. It sounds like something out of a horror movie, but it's been happening in real life to hundreds of people. The gist of the email - pay the hitman thousands of dollars, or die. The FBI reports receiving 115 separate complaints since the hitman spam was first spotted in early December 2006.


  •